HP laptops exposed to criminal hacking

• ndmmxiaomayi

  13 Dec 07, 21:30

  http://www.news.com/8301-10784_3-9833007-7.html
  
  I couldn't get hold of the model numbers.
  
  Must search harder. HP no comments.
  
  Wonders if Compaq is also affected.
• kenn3th

  13 Dec 07, 21:31

  MAYI!
• T E M P O

  13 Dec 07, 21:32

  
• ndmmxiaomayi

  13 Dec 07, 21:35

  Yes, Kenneth?
  
  I know you using HP.
  
  So what about Tempo? Another HP user?
• kenn3th

  13 Dec 07, 21:35

  
  Following laptop models, with all vendor's software and OS updates installed,
  
  has been confirmed to be vulnerable:
  
  HP 510 Notebook PC
  
  HP 530 Notebook PC
  
  HP Compaq 8710w
  
  HP Compaq 8710p
  
  HP Compaq 8510w
  
  HP Compaq 8510p
  
  HP Compaq 6910b
  
  HP Compaq 6715b
  
  HP Compaq 6515b
  
  HP Compaq 6510b
  
  HP Compaq 2710p
  
  HP Compaq 2510p
  
  HP Compaq NC series Business Notebook PC
  
  HP Compaq NC6230
  
  HP Compaq NC6220
  
  HP Compaq NC8230
  
  HP compaq NX series Business Notebook PC
  
  HP compaq NX7300
  
  HP compaq NX6120
  
  HP compaq NX8220
  
  HP compaq NX6325
  
  HP compaq NW series Mobile Workstation
  
  HP compaq NW9440
  
  HP compaq NW8440
  
  Compaq 1200b
  

  so far my laptop is safe, but for how long.
  mine is HP Compaq 6515b and 6510b is alr up there
  
• ndmmxiaomayi

  13 Dec 07, 21:36

  http://www.securityfocus.com/archive/1/484880
  
  My eyes tak stamp.
  
  Here's the list.
• ndmmxiaomayi

  13 Dec 07, 21:37

  You using what model?
• ndmmxiaomayi

  13 Dec 07, 21:40

  http://www.anspi.pl/~porkythepig/hp-issue/hp1408.php?vl=0&ac=0
  
  Enable JavaScript and go the above site. If it's vulnerable, you should receive some warning. If not, should see the below screen:
  
  
• kenn3th

  13 Dec 07, 21:44

  Originally posted by ndmmxiaomayi:

  You using what model?

  eye tak stamp again.above la
• ndmmxiaomayi

  13 Dec 07, 21:45

  Originally posted by kenn3th:

  eye tak stamp again.above la

  You put two models leh
  
  You got 2 HP laptops ar?
• kenn3th

  13 Dec 07, 21:45

  Originally posted by ndmmxiaomayi:

  http://www.anspi.pl/~porkythepig/hp-issue/hp1408.php?vl=0&ac=0
  
  Enable JavaScript and go the above site. If it's vulnerable, you should receive some warning. If not, should see the below screen:
  
  

  I got activeX, need to run?
• kenn3th

  13 Dec 07, 21:46

  Originally posted by ndmmxiaomayi:

  You put two models leh
  
  You got 2 HP laptops ar?

  aiyo.
  
  mine is 6515b
  6510b is already up in the list
  
  got it
• T E M P O

  13 Dec 07, 21:47

  HP..but heng not laptop. almost got one this year.
• ndmmxiaomayi

  13 Dec 07, 21:48

  Originally posted by kenn3th:

  I got activeX, need to run?

  Yesh. This test for the vulnerability. Then should pop up some warning.
• kenn3th

  13 Dec 07, 21:51

  Originally posted by ndmmxiaomayi:

  Yesh. This test for the vulnerability. Then should pop up some warning.

  
  
  this?
• ndmmxiaomayi

  13 Dec 07, 21:54

  Originally posted by kenn3th:

  
  
  this?

  Yesh.
  
  Looks good eh.
  
  Maybe Vista is not vulnerable. You running Vista?
• kenn3th

  13 Dec 07, 21:57

  Originally posted by ndmmxiaomayi:

  Yesh.
  
  Looks good eh.
  
  Maybe Vista is not vulnerable. You running Vista?

  Yup. But i still have not run that active x yet. after u run it, a programme will appear.
  
  
• ndmmxiaomayi

  13 Dec 07, 22:00

  Originally posted by kenn3th:

  Yup. But i still have not run that active x yet. after u run it, a programme will appear.
  
  

  I run it, nothing happened.
• kenn3th

  13 Dec 07, 22:01

  Vulnerable Software:
  
  ////////////////////
  
  HP Info Center v1.0.1.1
  
  HPInfoDll.dll ActiveX CTL v1.0
  
  Internet Explorer 6.0
  
  Internet Explorer 7.0
  
  Windows XP Home
  
  Windows XP Pro
  
  Windows 2000
  
  Windows 2003
  
  Windows Vista
  

  Affected software.
• kenn3th

  13 Dec 07, 22:05

  Originally posted by ndmmxiaomayi:

  I run it, nothing happened.

  CRAP! after i run it, it became that!
  what will happen?
  
  
• ndmmxiaomayi

  13 Dec 07, 22:08

  Originally posted by kenn3th:

  CRAP! after i run it, it became that!
  what will happen?
  
  

  Oh... must be my itchy hands again. I had tweaked the group policy... it will prompt me... but for some reason... after I agree... it's still disabled.
  
  Hehe
• kenn3th

  13 Dec 07, 22:10

  Originally posted by ndmmxiaomayi:

  Oh... must be my itchy hands again. I had tweaked the group policy... it will prompt me... but for some reason... after I agree... it's still disabled.
  
  Hehe

  so am i infected now?
  or what?
  
  sign and symptoms? i m lazy to read ><
• ndmmxiaomayi

  13 Dec 07, 22:13

  Originally posted by kenn3th:

  so am i infected now?
  or what?
  
  sign and symptoms? i m lazy to read ><

  If some idiot exploit you... you will be infected. There shouldn't be any sign or symptom of being infected until your ISP starts serving you notices. Or if you have any registry monitor, because according to the article, it modifies the registry.
  
  So... disable that addon.
  
  Tools > Manage Addons
  
  Find that addon and disable it.
  
  It's named HPClass... the one you downloaded.
• kenn3th

  13 Dec 07, 22:16

  Originally posted by ndmmxiaomayi:

  If some idiot exploit you... you will be infected. There shouldn't be any sign or symptom of being infected until your ISP starts serving you notices. Or if you have any registry monitor, because according to the article, it modifies the registry.
  
  So... disable that addon.
  
  Tools > Manage Addons
  
  Find that addon and disable it.
  
  It's named HPClass... the one you downloaded.

  i itchy hand again. go download it. so that's the live strain isit? or is it the testing strain.
• ndmmxiaomayi

  13 Dec 07, 22:22

  For the interested, here's what I did to my Group Policy.
  
  1. Start > Run and type in gpedit.msc and press Enter.
  
  2. Computer Configuration > Administrative Templates > Windows Components > Internet Explorer
  
  3. On the right hand side, double click on Do not allow users to enable or disable addons.
  
  4. On the Setting tab, select Enabled.
  
  5. Click OK to apply the settings.
  
  6. Then go to User Configuration > Administrative Templates > Windows Components > Internet Explorer
  
  7. On the right hand side, double click on Do not allow users to enable or disable addons.
  
  8. On the Setting tab, select Enabled.
  
  9. Click OK to apply the settings.
  
  When you open IE and check the settings (Tools > Manage Addons > Enable or disable Addons...), it should be greyed out.
  
  So even if you click OK... it won't run... because Windows doesn't allow you to enable or disable an addon.
  
  
  
  See the above picture... the HPInfo Class addon is downloaded and attempted to run... but due to policies in place... it can't run. Hehe